S.L. 586.8 Art. 33Position of the Data Protection Officer. 23

(1) The controller shall ensure that the Data Protection

Officer is involved, properly and in a timely manner, in all issues which relate to the protection of personal data.

(2) The controller shall support the Data Protection Officer in performing the tasks referred to in regulation 34 by providing resources FOR THE PURPOSES OF THE PREVENTION, INVESTIGATION, DETECTION OR PROSECUTION OF CRIMINAL OFFENCES OR THE

EXECUTION OF CRIMINAL PENALTIES necessary to carry out those tasks and access to personal data and processing operations, and to maintain his expert knowledge.

(3) The controller shall ensure that the Data Protection Officer does not receive any instructions regarding the exercise of the tasks referred to in regulation 34:

Provided that the Data Protection Officer shall report directly to the highest level of management.

(4) The Data Protection Officer shall not be dismissed or penalised by the controller for performing the tasks referred to in regulation 34.